LoginGROWI vulnerable to path traversal
11 May 2026 at 08:00
GROWI provided by GROWI, Inc. contains a path traversal vulnerability.
Normal view
Received — 11 May 2026
⏭
JVNRSS Feed - Update Entry
-
JVNRSS Feed - Update Entry
- Canon Production Printers and Office Multifunction Printers vulnerable to information disclosure
-
Canon Production Printers and Office Multifunction Printers vulnerable to information disclosure
11 May 2026 at 06:00
Canon Production Printers and Office Multifunction Printers contain an information disclosure vulnerability.
"Kura Sushi Official App" vulnerable to improper certificate validation
11 May 2026 at 05:00
"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation.
libXpm vulnerable to out-of-bounds read
11 May 2026 at 05:00
libXpm provided by X.Org Foundation contains an out-of-bounds read vulnerability.
Lhaz and Lhaz+ vulnerable to path traversal
11 May 2026 at 05:00
Lhaz and Lhaz+ provided by Chitora soft contain a path traversal vulnerability.
-
- Open redirect vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor
-
Open redirect vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor
30 April 2026 at 07:00
Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain an open redirect vulnerability.
Received — 26 April 2026
⏭
JVNRSS Feed - Update Entry
Apache ActiveMQ series improper validation of MQTT packets [AMQ-9810]
24 April 2026 at 05:00
Apache ActiveMQ series provided by The Apache Software Foundation does not properly validate MQTT packets.
Received — 23 April 2026
⏭
JVNRSS Feed - Update Entry
GROWI vulnerable to Regular expression Denial-of-Service (ReDoS)
23 April 2026 at 11:15
GROWI provided by GROWI, Inc. contains a Regular expression Denial-of-Service (DoS) vulnerability.
Multiple vulnerabilities in LogonTracer
23 April 2026 at 07:00
LogonTracer provided by Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) contains multiple vulnerabilities.
IP Setting Software may insecurely load Dynamic Link Libraries
23 April 2026 at 05:00
IP Setting Software provided by i-PRO Co., Ltd. may insecurely load Dynamic Link Libraries.
CMS ALAYA vulnerable to SQL injection
23 April 2026 at 05:00
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.
Ziostation2 vulnerable to path traversal
22 April 2026 at 07:00
Ziostation2 provided by Ziosoft, Inc. contains a path traversal vulnerability.
-
- Installers of LiveOn Meet Client for Windows and its plugin may insecurely load Dynamic Link Libraries
-
Installers of LiveOn Meet Client for Windows and its plugin may insecurely load Dynamic Link Libraries
22 April 2026 at 07:00
The installer of LiveOn Meet Client for Windows and the installer of Canon Network Camera Plugin provided by Japan Media Systems Corporation may insecurely load Dynamic Link Libraries.
DeepL Chrome browser extension vulnerable to cross-site scripting
22 April 2026 at 05:00
DeepL Chrome browser extension contains a cross-site scripting vulnerability.
Multiple vulnerabilities in silex technology SD-330AC and AMC Manager
22 April 2026 at 02:15
SD-330AC and AMC Manager provided by silex technology, Inc. contain multiple vulnerabilities.
-
- SKYSEA Client View and SKYMEC IT Manager improper file access permission settings
-
SKYSEA Client View and SKYMEC IT Manager improper file access permission settings
20 April 2026 at 07:00
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configures the installation folder with improper file access permission settings.
Multiple vulnerabilities in CubeCart
17 April 2026 at 05:00
CubeCart provided by CubeCart Limited contains multiple vulnerabilities.
Arcserve UDP Console vulnerable to redirect to a dummy URL
16 April 2026 at 05:00
Offline activation traffic of UDP Console provided by Arcserve may be redirected to a dummy URL.
-
- OMRON UPS (Uninterruptible Power Supply) management application may insecurely load Dynamic Link Libraries
-
OMRON UPS (Uninterruptible Power Supply) management application may insecurely load Dynamic Link Libraries
16 April 2026 at 04:00
The UPS (Uninterruptible Power Supply) management application provided by OMRON Corporation may insecurely load Dynamic Link Libraries.
GROWI vulnerable to stored cross-site scripting
15 April 2026 at 05:00
GROWI provided by GROWI, Inc. contains a stored cross-site scripting vulnerability.
